Last updated: 16 September 2026 · Effective immediately
This policy explains what we collect when you use keheai.com and its API, why we collect it, and what we do with it. We keep it short on purpose.
1. Who we are
Xi'an Kehe Cross-border E-commerce Co., Ltd. ("Kehe", "we"), registered in Xi'an, Shaanxi, China. We operate the API gateway at keheai.com. For any privacy question, write to harvey@keheai.com.
2. What we collect
Account data — the email address you register with.
Usage data — API request metadata: timestamps, model name, token counts, response status, and the API key used. We need this to meter usage and detect abuse.
Payment data — handled entirely by our Merchant of Record, Creem. We never see or store your card number. We only receive confirmation that a payment succeeded, plus the email used at checkout.
Support messages — anything you send us by email.
3. What we do NOT collect
We do not store your prompt or completion content for training or resale. Requests are relayed to upstream model providers and are not archived as content by us.
We do not buy data about you from third parties.
We do not use advertising or third-party tracking cookies on this site.
4. Why we use it
To provide the service and keep it running.
To meter usage and bill correctly.
To prevent abuse, fraud and unauthorised access.
To answer your support requests.
5. Who we share it with
Creem (Merchant of Record) — for payment processing, tax handling and invoicing. Creem is the legal seller of record for purchases.
Upstream model providers — your API request content is transmitted to the model provider you invoke, because that is what generates the response.
Infrastructure providers — servers and email delivery used to run the service.
Legal obligations — if we are required by law to disclose.
We do not sell your personal data.
6. How long we keep it
Account data — while your account is active, then deleted on request.
Usage and billing records — retained as long as needed for accounting and legal compliance.
7. Your choices
You can ask us to access, correct or delete your account data. Email harvey@keheai.com and we will respond within a reasonable time. Transactional emails (receipts, delivery, security notices) cannot be opted out of while your account is active.
8. Security
We use HTTPS for all traffic, store API keys hashed where the platform supports it, and restrict server access. No system is perfect; if we ever discover a breach affecting your data, we will tell you.
9. Children
This service is not intended for anyone under 18. We do not knowingly collect data from children.
10. Changes
If we materially change this policy, we will update the date at the top and notify registered users by email.